AMENDMENT AND RESPONSE UNDER 37 CFR § 1.111 

Serial Number: 10/511,366 
Filing Date: October 14, 2004 

Title: Conditional access system and apparatus 



IN THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) An apparatus for processing a signal that contains a stream of 
encrypted data and a plurality of individually identified stream of messages, each of the streams 
of messages containing decryption information for decrypting a common part of the encrypted 
data, th e apparatus comprising comprising: 

[[-]] an input operable to receive [[for]] the signa l the signal including a stream of 
encrypted data and a plurality of individually identified streams of mess ages, each of the 
individually identified streams of messages operable to be used to decrypt a co mmon part of the 
encrypted data independently of any other of the individually identified streams of messages : 

[[-]] a storage device coupled to the input for storing and retrieving the signal or part of 
the signal; 

[[-]] a rendering unit; 

[[-]] a mode selection unit arranged to provide an output indicating a selection of an 
operating mode of a plurality of operating modes, the indicated selection of the operating mode 
associated with a particular one of the plurality of individually identified streams of messages 
that is to be used to for the selected operating mode in the decryption of the stream of encrypted 
data sel e ct an op e rating mode from a plurality of modes including a live rendering mode and a 
replay mode for r e ndering th e signal with th e r e ndering unit when received from the input and 
when retrieved from the storage device respectively ; and 

[[-]] a conditional access decoder coupled to the mode selection unit, to the input, and to 
the storage device, the conditional access decoder operable to receive the output indicating the 
selection of the operation mode, and to decrypt for d e crypting the encrypted data using a 
s e lectable the particular one of the plurality of individually identified streams of messages 
associated with the selected operating mode , if entitled to use said selectabl e the particular one of 
the individually identified streams[[,]] of messages, to generate a stream of decrypted data from 
the stream of encrypted data the decod e r sel e cting th e stream of messages dep e ndent on th e 
select e d operating mode . 
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2. (Currently Amended) The [[An]] apparatus according to Claim 1 , the storage device 
being arranged to block out from the signal, during storage of the signal, at least one of the 
streams of messages other than the stream of messages that the conditional access decoder 
selects in the replay mode. 

3. (Currently Amended) The [[An]] apparatus according to Claim 2, the conditional access 
decoder being arranged to detect the selected operating mode from the presence or absence of the 
at least one of the streams of messages that is blocked out from the signal during storage. 

4. (Currently Amended) The [[An]] apparatus according to Claim 1 , wherein the apparatus 
comprises a transcoder, the plurality of operating modes including a transcoding mode, the 
apparatus being arranged to transcode the signal when the mode selection unit selects the 
transcoding mode. 

5. (Currently Amended) A method of distributing a signal that contains a stream of 
encrypted data, the method comprising comprising: 

[[-]] including in the signal a plurality of individually identified[[.]] streams of messages 
with the stream of encrypted data , each of the individually identified streams of messages 
containing decryption information for decrypting a common part of the encrypted data 
independent of any other of the individually identified streams of messages [[ ,]]; and 

[[-]] distributing authorization information to one or more receivers of the signal str e am , 
including providing each one or more of the receivers receiv e r with a selected authorization, the 
authorizations authorization being selected from a set of authorizations that includes at least one 
authorization to use combinations of the streams of messages to decod e decrypt the stream of 
encrypted data, the authorization being selected in any given one of the receivers depending on 
availability in the given receiver of respective entitlements for respective ones of the 
authorizations. 
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6. (Currently Amended) A signal distribution system, for distributing a signal that contains 
a stream of encrypted data, the system comprising comprising: 

[[-]] a signal assembly unit that is arranged to include a plurality of individually identified 
streams of messages with the stream, each of the streams of messages containing decryption 
information for decrypting a common part of the encrypted data independent of any other of the 
streams of messages ; 

[[-]] a transmission unit for broadcasting the assembled signal; and 
[[-]] an authorization information distribution unit, for distributing authorization 
information to one or more receivers of the stream, providing each one or more of the receivers 
r e c e iver with a selected authorization, the authorizations authorization being selected from a set 
of authorizations that includes at least one authorization to use combinations of the streams of 
messages to d e cod e decrypt the stream of encrypted data, the authorization being selected in any 
given one of the receivers depending on availability in the given receiver of respective 
entitlements for respective ones of authorizations. 

7. (New) The apparatus of claim 1 , wherein the operating modes include a live rendering 
mode, wherein in the live rendering mode the mode selection unit provides one or more 
commands so that the signal provided at the input is passed to the conditional access decoder. 

8. (New) The apparatus of claim 7, wherein only the particular one of the plurality of 
individually identifiable streams of messages that is associated with the live rendering mode is 
used to decrypt the stream of encrypted data included in the signal provided at the input and 
passed on to the conditional access decoder for decryption during the live rendering mode. 

9. (New) The apparatus of claim 1 , wherein the operating modes include a reply mode, 
wherein in the replay mode, the mode selection unit provides one or more commands so that the 
signal stored in the storage device is retrieved and passed to the conditional access decoder. 
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1 0. (New) The apparatus of claim 9, wherein only the particular one of the plurality of 
individually identifiable streams of messages that is associated with the reply mode is used to 
decrypt the stream of encrypted data included in the signal provided by the storage device and 
passed on to the conditional access decoder for decryption during the reply mode. 

11. (New) The apparatus of claim 1 , further including a rendering unit coupled to the 
conditional access decoder, the rendering unit operable to render the stream of decrypted data 
provided by the conditional access decoder. 

1 2. (New) The apparatus of claim 1 , further including a multiplexer coupled to the mode 
selection unit, to the input, to the storage device, and to the conditional access decoder, the 
multiplexer operable to receive the output from the mode selection unit indicating the selection 
of the operating mode, and to pass the signal from the input to the conditional access decoder if 
the output selection is indicative of a live rendering mode, and to pass the signal provided from 
the storage device to the conditional access decoder if the output selection is indicative of a reply 
mode. 

13. (New) The method of claim 5, wherein the stream of encrypted data is divided into a 
plurality of successive time intervals, and wherein for each of the time intervals the encrypted 
data is encrypted in a different way and needs a different control word for decrypting the 
encrypted data included within each successive time interval, and 

wherein the streams of messages include at least two different entitlement control 
messages each including the control word needed to decrypted the encrypted data for a 
respective one of the successive time intervals within which the at least two different entitlement 
control message are included. 

14. (New) The method of claim 5, wherein each of the plurality of individually identifiable 
streams of messages include a plurality of entitlement control messages, each of the plurality of 
entitlement control messages associated with a different one of the authorizations, and each of 
the plurality of entitlement control massages operable to provide a same control word for use in 
decryption of a same portion of the stream of encrypted data. 
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15. (New) The system of claim 6, wherein each of the individually identified streams of 
messages include at least a first control word and a second control word, the first control word 
for decrypting the current data and within a same time interval as the current data within the 
stream of encrypted data, and the second control word for decrypting the encrypted data that 
begins within the stream of encrypted data when there is a change in the control word needed to 
decrypt the stream of encrypted data. 

1 6. (New) The system of claim 6, wherein the authorization is included in one or more 
entitlement management messages. 



